Lock Down IIS and SQL Server

Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

Planning for Extranet or Internet Deployment

Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

.NET Data Access Architecture Guide